Docker运行WordPress通过Nginx反向代理开启HTTPS绑定域名

末蓝、 2022-09-15 12:43 193阅读 0赞

![src=http\_\_\_blog.orx.me\_wpcontent\_uploads\_2013\_12\_wordpresslogo.jpgrefer=http\_\_\_blog.orx.jpg][src_http_blog.orx.me_wpcontent_uploads_2013_12_wordpresslogo.jpgrefer_http_blog.orx.jpg]

> 后续更新地址：https://www.aiprose.com/blog/147

本文使用docker-compose运行wordpress，使用已有的mysql数据库，外部的nginx开启https反向代理到wordpress。如果你的域名还没有备案请先去备案。

# 编写启动文件 #

编写wordpress.yml，然后执行 docker-compose -f wordpress.yml up -d 启动容器

172.18.0.1:3308是我自己的mysql地址

version: "3"
    services:
      wordpress:
         image: wordpress:latest
         ports:
           - "8000:80"
         restart: always
         volumes:
          - /opt/wordpress:/var/www/html
         environment:
           - WORDPRESS_DB_HOST=172.18.0.1:3308
           - WORDPRESS_DB_USER=wordpress
           - WORDPRESS_DB_PASSWORD=wordpress

如果你之前没有现成的mysql数据库，可以按照官网的教程编写配置文件

version: '3.1'
    services:
      wordpress:
        image: wordpress
        restart: always
        ports:
          - 8080:80
        environment:
          WORDPRESS_DB_HOST: db
          WORDPRESS_DB_USER: wordpress
          WORDPRESS_DB_PASSWORD: wordpress
          WORDPRESS_DB_NAME: wordpress
        volumes:
          - /opt/wordpress:/var/www/html
    
      db:
        image: mysql:5.7
        restart: always
        environment:
          MYSQL_DATABASE: wordpress
          MYSQL_USER: wordpress
          MYSQL_PASSWORD: wordpress
          MYSQL_RANDOM_ROOT_PASSWORD: '1'
        volumes:
          - /opt/mysql:/var/lib/mysql

这里需要去wordpress后台配置地址，修改为我们最后带域名的地址。  
访问 ip:8000/wp-admin  
![image.png][]

# 配置Nginx #

这里使用nginx开启https并反向代理到worpress,如果没有安装nginx，请先安装nginx。HTTPS证书可以去阿里云申请免费的SSL证书，这里的坑比较多，请注意仔细看配置文件。  
我们的案例域名是aispider.cc,我们把域名全部重定向到 https://www.aispider.cc  
vi /etc/nginx/nginx.conf

server { 
            listen  80;
            server_name     aispider.cc;
            location / { 
               if ($host !~* ^www) { 
                    set $name_www www.$host;
                    rewrite ^(.*) https://$name_www$1 permanent;
               }
               rewrite ^(.*) https://$host$1 permanent;
            }
        }
        server { 
            listen  80;
            server_name  www.aispider.cc;
            rewrite ^(.*) https://$host$1 permanent;
        }
        server { 
            listen       443 ssl http2 default_server;
            server_name  www.aispider.cc;
            ssl_certificate "/opt/cer/aispider.cc.pem";
            ssl_certificate_key "/opt/cer/aispider.cc.key";
            ssl_session_cache shared:SSL:1m;
            ssl_session_timeout  10m;
            ssl_ciphers PROFILE=SYSTEM;
            ssl_prefer_server_ciphers on;
    
            location / { 
               if ($host !~* ^www) { 
                  set $name_www www.$host;
                  rewrite ^(.*) https://$name_www$1 permanent;
               }
               proxy_pass  http://localhost:8000;
               proxy_redirect     off;
               proxy_set_header   Host $host;
               proxy_set_header   X-Real-IP $remote_addr;
               proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
               proxy_set_header   X-Forwarded-Host $server_name;
               proxy_set_header   X-Forwarded-Proto https;
               proxy_set_header   Upgrade $http_upgrade;
               proxy_set_header   Connection "upgrade";
               proxy_read_timeout 86400;
            }
        }

# 修改wordpress配置文件 #

如果直接代理过去，会有很多问题，比如循环重定向转发，js、css等资源走的是http请求，地址重定向为localhost，我也是踩了很多坑才配置好。

修改/opt/wordpress/wp-config.php，这个是docker容器挂载的卷，增加如下内容  
vi /opt/wordpress/wp-config.php

define('FORCE_SSL_ADMIN', true);
    
    if (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false){ 
        $_SERVER['HTTPS'] = 'on';
        $_SERVER['SERVER_PORT'] = 443;
    }
    if (isset($_SERVER['HTTP_X_FORWARDED_HOST'])) { 
        $_SERVER['HTTP_HOST'] = $_SERVER['HTTP_X_FORWARDED_HOST'];
    }
    
    define('WP_HOME','https://www.aispider.cc/');
    define('WP_SITEURL','https://www.aispider.cc/');

修改后最好重启一下容器，docker-compose -f wordpress.yml restart

最后访问配置好的地址 https://www.aispider.cc/

我这里用的主题是 RK blogger ，如果喜欢，自行百度去下载安装。一定要记得修改主题配置底部备案信息的展示。

![image.png][image.png 1]

[src_http_blog.orx.me_wpcontent_uploads_2013_12_wordpresslogo.jpgrefer_http_blog.orx.jpg]: /images/20220828/a6dd9cac37274b848f1913ae56ffd9fb.png
[image.png]: /images/20220828/4ca0c69a099845be80f7d577514ce074.png
[image.png 1]: /images/20220828/fef56722606f4983bb150eba355706c3.png